Privacy Policy

1. Information We Collect

We collect information you provide, information generated when you use ChatRIP, and information we receive from service providers that help us operate the Service.

• Account and sign-in information. Identifiers supplied through Arda Gateway sign-in, and your confirmation of your age when you sign in. ChatRIP stores a one-way hash of your Arda account identifier to link your conversations and settings to your account. Arda Gateway sign-in passes ChatRIP your Gateway account identifier only. It does not share your email address, name, or other profile fields with ChatRIP.
• Billing and credit information (web and iOS only, adults only). Information about Gateway top-ups and usage, processed by ArdaBot and payment providers. We do not store full payment card numbers in ChatRIP. For iOS In-App Purchases, we receive Apple transaction identifiers, product identifiers, purchase status, and refund events to verify and reconcile credits. We also keep records of other payment settlements made to ChatRIP. Users under 18 may not make purchases. No billing information is collected through the ChatGPT app.
• Conversations (web and iOS). Prompts, messages, generated responses, citations, source interactions, selected legends, conversation identifiers, conversation summaries used to keep long conversations in context, and feedback.
• Voice (web and iOS). During voice calls, microphone audio is streamed to the selected AI provider to produce a response. ChatRIP does not retain raw microphone audio, but the user and assistant transcript may be saved in your conversation history.
• ChatGPT app information. See Section 4. ChatRIP does not save ChatGPT questions, tool inputs/results, or answers as conversations. It retains limited connection, abuse-prevention and log records.
• Connection credentials. When you connect ChatRIP to ChatGPT or another MCP client, or create a developer API key, we store a hash of the access token (not the token itself), its name, scopes, and its creation, expiry, last-used, and revocation times.
• Usage-limit and abuse-prevention records. For free-trial and rate-limit enforcement, we store hashed account identifiers, a hash derived from your IP address, a browser identifier, and timestamps.
• Usage analytics. Page views, legend opens, source opens, chat prompt counts, blocked-chat events, connection events, referrers, timestamps, and feature interactions. Our analytics are configured not to capture conversation text, and session recording is disabled.
• Native reliability events (iOS). Privacy-safe events such as voice connection stage, retry count, duration, HTTP or close status, and crash or hang counts. These events do not include audio, transcripts, prompts, tokens, or contact information.
• Device, log, and error information. Device, browser, IP address, request, error, and server log information collected automatically for security, debugging, abuse prevention, and reliability. Our error monitoring is configured to strip cookies, authorization headers, IP addresses, email addresses, and request bodies before errors are sent.
• Support and safety concerns. Emails you send to support@ardabot.ai, including any content you choose to share and our follow-up notes.
• Support communications and any other information you choose to send us.

Apart from the age confirmation at sign-in, ChatRIP does not ask for your name, phone number, or precise location in the product.

2. How We Use Information

We use information to:

• provide ChatRIP, including authenticating users, applying age requirements, generating legend responses on the web and iOS, retrieving sources and citations, and preserving conversations;
• process top-ups and credit purchases by adult users on the web and iOS;
• enforce usage limits, prevent abuse, enforce our content standards, and investigate reports;
• understand product usage and reliability, debug errors, and secure the Service;
• respond to support requests and parent or guardian inquiries; and
• comply with legal obligations.

We may use aggregated or de-identified information to understand corpus readiness, model performance, feature usage, and product quality. We do not use personal information to target advertising, and we do not sell personal information or share it for cross-context behavioral advertising.

3. AI Processing (Web and iOS)

When you chat with a legend on the web or in iOS, your prompt, conversation context, selected legend, retrieved source excerpts, and related metadata may be sent through Arda Gateway to upstream AI model providers to generate a response. To find relevant source passages, ChatRIP may also send your question to an embedding model provider.

Do not include highly sensitive personal information in prompts. If you do, you understand that these systems may process it to provide the Service.

AI processing inside ChatGPT works differently. See Section 4.

4. ChatRIP in ChatGPT

ChatRIP is available as an app inside ChatGPT for ages 13 and up. ChatGPT's own model writes the replies. ChatRIP's tools supply historical profiles and source passages with citations, plus a source card. They do not generate or store a second conversation.

Optional account connection. Public tools work anonymously without a ChatRIP account or purchase. If you choose to connect an account, you sign in through chatrip.app with Arda Gateway and approve read-only access to legend profiles and sources. ChatRIP issues an access token with no billing credential that cannot spend credits. It expires after 30 days, after which you reconnect.

What ChatRIP receives from ChatGPT. When ChatGPT calls a ChatRIP tool, ChatRIP receives:

• an access token identifying your ChatRIP account only if you choose account connection;
• the selected legend and a short source-search question (up to 2,000 characters) chosen by ChatGPT;
• optional pseudonymous subject/session hints used only for abuse limits; and
• standard request information, such as IP address, user agent, and timestamps.

There is no transcript, prior-turn array or answer-text input. ChatGPT chooses the search question and may include text from your conversation in it, so avoid sensitive information. ChatRIP does not receive your ChatGPT account profile or files through a separate input. ChatRIP's MCP server does not read locale or approximate-location hints. It reads subject/session hints solely to enforce abuse limits; those hints never authorize account access.

What ChatRIP returns to ChatGPT. ChatRIP's tools return:

• legend profiles (name, birth and death years, nationality, short biography, and subject areas), with a portrait image in the answer card;
• short descriptive notes about the legend's voice and style;
• source passages relevant to the question, with citations (title, author, year, link, and excerpt);
• a label stating that the legend is an AI simulation, not the real person; and
• a source card displaying the legend, AI-simulation disclosure and cited source passages. The card does not receive or display ChatGPT's answer.

ChatRIP finds source passages using text search in its own database. In ChatGPT, ChatRIP does not send your question to Arda Gateway, to any AI model, or to an embedding provider. Tool results do not contain pricing, payment links, account balances, or internal diagnostic identifiers.

No credits or charges. Using ChatRIP in ChatGPT does not use ChatRIP credits, check or change your Arda Gateway balance, or charge you. ChatRIP does not sell anything inside ChatGPT.

What ChatRIP stores. The MCP tool path does not persist search questions, source results or ChatGPT answers in conversations, messages, widget state or product analytics. It does retain hashed abuse-limit identifiers derived from validated subject/session hints, IP addresses, or a user-agent fallback, with tool buckets and timestamps. Anonymous-call logs contain the tool name and presence booleans, not the raw hints or question. Optional connections also retain access-token records; hosting and error logs may retain standard request metadata. These operational records follow Section 7.

OpenAI's processing. ChatGPT is provided by OpenAI. Your messages to ChatGPT, ChatGPT's model output, and the ChatRIP tool results that ChatGPT receives are processed by OpenAI under OpenAI's own terms of use and privacy policy, not this policy. ArdaBot does not control how OpenAI processes, stores, or uses that information.

Disconnecting. You can disconnect ChatRIP in ChatGPT's settings for connected apps. To revoke an optional account connection on our side, sign in at chatrip.app/mcp-setup and revoke the "MCP OAuth" key, or contact support@ardabot.ai for account deletion. Public historical data remains available anonymously.

5. How We Share Information

We share information with service providers that process it on our behalf or help us operate ChatRIP. These include:

• hosting and web analytics providers;
• database hosting;
• product analytics providers;
• error monitoring providers;
• our sign-in, billing, and AI routing service, operated by ArdaBot;
• AI model and embedding providers, on the web and iOS only;
• app store providers, for iOS In-App Purchases; and
• payment providers for Gateway top-ups.

When you use ChatRIP in ChatGPT, ChatRIP's tool results go to OpenAI as part of your ChatGPT session (see Section 4).

We may also disclose information if required by law, to protect rights and safety (including the safety of minors), to investigate abuse or security incidents, in connection with a business transaction such as a merger or acquisition, or at your direction or with your consent.

6. Cookies and Local Storage

ChatRIP uses cookies and similar technologies for essential functions:

• a sign-in cookie that keeps you signed in on the web for up to 30 days, or until you sign out;
• short-lived cookies (10 minutes) that protect the sign-in and connection flow; and
• session continuity and security.

The web app also uses your browser's local storage to remember preferences, a random browser identifier, draft messages, and references to your conversations. These stay on your device until you clear them.

We use first-party and service-provider analytics to understand product usage and reliability. We do not use third-party advertising cookies in ChatRIP.

7. Data Retention

We keep personal information only as long as described below, then delete or de-identify it.

The product-usage analytics we keep do not include IP addresses.

We may keep information longer where the law requires it, or where it is needed to resolve disputes, enforce our Terms, or investigate fraud, abuse, or safety incidents. When we no longer need it, we delete, aggregate, or de-identify it where reasonably feasible.

8. Exporting and Deleting Your Data

On the web (chatrip.app)

Signed-in web users can use Your data to download an export including age-attestation information. Account deletion is available only when our server completion service is enabled; otherwise email support@ardabot.ai. Deletion removes account-linked ChatRIP data and forfeits remaining credits. Pending Arda erasure is completed through automatic server retries and operational follow-up; you do not need to return. We verify support requests and respond within 30 days. Do not send passwords, access tokens or payment details. Campaign conversations are not linked to your account and are excluded from this deletion. Payment records and retention exceptions follow Section 7.

By email

You can request an export or deletion at any time by emailing support@ardabot.ai. We answer export and deletion requests within 30 days. We may ask for information needed to verify your request and protect your account.

In the iOS app

Signed-in iOS users can choose Settings → Export My Data to download conversation data or Settings → Delete Account to request deletion. Local deletion removes conversations, messages, citations, summaries, shares, linked analytics, free-trial records and MCP credentials. Success is reported only after Arda confirms completed erasure; pending work is retried automatically without a user session. Payment records follow Section 7. If a request fails, contact support@ardabot.ai to confirm completion.

In ChatGPT

The MCP path does not retain your search questions, source results or ChatGPT answers. It does retain the limited abuse, connection and log records described in Sections 4 and 7. Contact support@ardabot.ai for requests about those records, subject to verification and retention exceptions. Disconnect or revoke an optional connection as described in Section 4. To delete data held by OpenAI, use ChatGPT's own controls and OpenAI's privacy policy.

Local data

You can clear ChatRIP's local storage and cookies at any time in your browser settings. Signing out removes the sign-in cookie.

9. Security

We use reasonable technical, administrative, and organizational safeguards designed to protect personal information. These include encryption in transit, hashed storage of access tokens, access controls, required PKCE for ChatGPT connections, redaction of sensitive data from error reports, and operational monitoring. No internet service can be guaranteed to be perfectly secure.

You are responsible for keeping your account, browser, devices, and credentials secure.

10. Your Rights and Choices

Depending on where you live, you may have the right to access, correct, delete, export, or restrict certain personal information, or to object to certain processing. You may also have the right to withdraw consent where processing is based on consent. You can use the tools in Section 8 or contact support@ardabot.ai. We answer requests within 30 days, and we will not discriminate against you for exercising your rights.

11. California Privacy Rights

If you are a California resident, you may have rights under California privacy law, including the right to know, access, correct, and delete personal information, and to opt out of the sale or sharing of personal information. ChatRIP does not sell personal information or share it for cross-context behavioral advertising, including that of consumers under 16.

12. Teens and Children

Under 13. ChatRIP is for users 13 and older and does not support use by children under 13 on any surface, including ChatGPT. We do not knowingly collect personal information from children under 13. We ask users to confirm their age at sign-in. If we learn that we have collected personal information from a child under 13, we will delete it and close the associated account. Parents who believe their child under 13 has used ChatRIP can contact support@ardabot.ai.

Ages 13 to 17. Teens aged 13 to 17 may use ChatRIP. Purchases are not available to minors. For users who tell us they are 13 to 17:

• we collect the same limited information described in Section 1 and use it only for the purposes in Section 2;
• they may not make purchases, so we collect no billing or payment information from them;
• we do not use their information for targeted advertising, and we do not sell or share it for cross-context behavioral advertising;
• every legend/persona system prompt prohibits explicit sexual content and sexual roleplay, while allowing educational and historical discussion of sexuality; other content categories rely on the ChatGPT/OpenAI model's built-in safety;
• a parent or guardian may contact support@ardabot.ai to request access to, export of, or deletion of a teen's ChatRIP data, subject to verification of their identity and relationship and to applicable law, and we answer within 30 days; and
• teens should not share contact details or other personal information in conversations or public share links.

13. International Transfers

ArdaBot is based in the United States. ChatRIP and its providers may process information in the United States and other countries. If you use ChatRIP from outside the United States, your information may be transferred to countries whose data protection laws differ from those of your country.

14. Changes to This Policy

We may update this Privacy Policy from time to time. When we make material changes, we will post the updated policy with a new effective date and, where required by law, give additional notice or ask for consent. Your continued use of ChatRIP after changes take effect means you acknowledge the updated policy.

15. Contact

Questions about this Privacy Policy, privacy requests, and parent or guardian requests may be sent to:

• ArdaBot, Inc.
• c/o Legalinc Corporate Services Inc.
• 131 Continental Dr, Suite 305
• Newark, DE 19713
• Email: support@ardabot.ai